ai.dreamlit/mcp

Est-ce que ai.dreamlit/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « ai.dreamlit/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• confirm_publish≈ 3607 tokens

  Use only after explicit user confirmation and a prior prepare_publish result to publish or schedule a Dreamlit workflow. Side effect: installs live database/repeating/auth triggers, schedules or sends broadcasts, and may enable notification delivery; sandbox mode can hold notifications for inspection. Returns the published workflow status and app URLs. Do not call speculatively or without carrying forward the prepare_publish safety fields.

  Paramètres, retour & exemple (5)

  Paramètres

  • workflowId · string · requis
    Workflow id to publish.
  • isSandboxed · boolean · optionnel
    Whether to publish in sandbox mode so notifications are held for inspection.
  • expectedUpdatedAtIso · ? · optionnel
    Workflow updatedAt timestamp returned by prepare_publish, used as a safety check.
  • expectedEditableVersionId · ? · optionnel
    Editable version id returned by prepare_publish, used as a safety check.
  • expectedPublishedVersionId · ? · optionnel
    Published version id returned by prepare_publish, used as a safety check.

  Exemple d'appel

  {"name": "confirm_publish", "arguments": {"workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• create_or_update_workflow≈ 4096 tokens

  Creates a new Dreamlit workflow draft or updates an existing draft from an outcome-oriented natural-language prompt. Use after get_status; use get_workflow_and_preview_url first when editing an existing workflow, then describe the steps to change by what they do, not by step id. Each call continues the workflow's current chat; pass startNewChat to start fresh. Existing Supabase Auth workflows can be edited except for the immutable trigger step; creating Supabase Auth workflows must happen through Supabase Auth email setup in the Dreamlit web app. Side effect: may create or modify a draft, but does not publish or install live triggers. Returns the workflow/draft result, action-required or handoff details when more input is needed, and relevant app URLs. Do not use for publishing, direct database changes, or low-level graph edits.

  Paramètres, retour & exemple (8)

  Paramètres

  • name · string · optionnel
    Name for a new workflow draft. Use when the user names the workflow; otherwise Dreamlit picks one. Only valid when creating; use rename_workflow to rename an existing workflow.
  • prompt · string · requis
    Outcome-oriented workflow authoring request. Describe the event or schedule, audience, recipient, message goal, data needed, timing, business rules, and unsubscribe intent. When editing, refer to existing steps by what they do (for example, the query that finds returning customers, or the email with subject "Welcome back"), never by step id. Let Dreamlit choose email styling unless the user gives specific style direction. For broadcasts, request a future send time instead of an immediate send.
  • projectId · string · optionnel
    Target project id for creating a new workflow draft.
  • workflowId · string · optionnel
    Existing workflow id to continue editing. Use get_workflow_and_preview_url first when changing an existing workflow.
  • startNewChat · boolean · optionnel
    Start a fresh Dreamlit chat for this request instead of continuing the workflow's current chat. The new chat still sees the current draft but not earlier turns. Use when switching to an unrelated change, after long turns with pasted SQL or HTML, or when Dreamlit keeps misreading the request. Ignored when creating a workflow.
  • userCurrentTimeIso · string · optionnel
    User's current time as an ISO timestamp with offset, useful for relative schedule requests.
  • userCurrentTimeZoneId · string · optionnel
    IANA timezone id for the user, useful for repeating workflows and scheduled broadcasts.
  • userEmailStepComments · array · optionnel
    Optional inline comments for revising email step content.

  Exemple d'appel

  {"name": "create_or_update_workflow", "arguments": {"prompt": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• get_analytics≈ 4828 tokens

  Read-only. Use to query Dreamlit analytics for overview metrics, notification rows, recipient engagement, or workflow run rows with filters, sorting, and cursor pagination. Returns bounded structured analytics data, effective query metadata, pagination details when rows are included, and relevant app URLs. Do not use for CSV exports, bulk dumps, workflow edits, publishing, or low-level database access.

  Paramètres, retour & exemple (11)

  Paramètres

  • sort · object · optionnel
    Optional row sort. Overview ignores sorting.
  • view · string · requis · overview | notifications | recipients | workflow_runs
    Analytics surface to query: overview cards, notification rows, recipient rows, or workflow run rows.
  • limit · integer · optionnel
    Maximum rows to return. Defaults to 25 and is capped at 100.
  • range · object · optionnel
    Optional explicit timestamp range. Overrides window and is applied to the view's primary timestamp.
  • cursor · string · optionnel
    Opaque pagination cursor from a previous get_analytics response.
  • window · string · optionnel · 1h | 24h | 7d | 14d | 30d | 90d | all
    Relative analytics window. Defaults to 30d. Ignored when range is provided.
  • channel · string · optionnel · email | slack
    Notification channel for overview and notification analytics. Defaults to email. Recipient analytics are email-only.
  • filters · object · optionnel
    Optional analytics filters. Unsupported combinations return a clear error.
  • include · array · optionnel
    Optional response sections to include. Defaults depend on the requested view.
  • timeZone · string · optionnel
    IANA timezone for daily series bucketing. Defaults to UTC.
  • projectId · string · optionnel
    Project id to query analytics from. Required when access is ambiguous.

  Exemple d'appel

  {"name": "get_analytics", "arguments": {"view": "overview"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• get_status≈ 3342 tokens

  Read-only. Use first when the agent needs Dreamlit product guidance, prompting guidance, approved workspace context, project setup, schema hints, workflow state, or relevant app URLs. Returns a compact context pack with concepts, recommended tool flow, actor/workspace/project data, optional authoring context, optional workflow context, and appUrls. Do not use this to create, update, publish, or unpublish workflows.

  Paramètres, retour & exemple (2)

  Paramètres

  • projectId · string · optionnel
    Optional project id. Include it to return project setup, schema hints, and authoring context.
  • workflowId · string · optionnel
    Optional workflow id. Include it to return concise workflow state and preview URL.

  Exemple d'appel

  {"name": "get_status", "arguments": {"projectId": "texte", "workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• get_workflow_and_preview_url≈ 3262 tokens

  Read-only. Use before editing, verifying, or preparing publish for an existing workflow. Returns normalized draft and published workflow structure plus the Dreamlit preview/builder URL and status URLs. Step ids are for reading only; when asking create_or_update_workflow for changes, describe steps by what they do. Do not use to create, update, publish, or unpublish workflows.

  Paramètres, retour & exemple (1)

  Paramètres

  • workflowId · string · requis
    Workflow id to inspect before editing, verifying, or publishing.

  Exemple d'appel

  {"name": "get_workflow_and_preview_url", "arguments": {"workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• list_brand_styles≈ 3313 tokens

  Read-only. Use when the user wants to inspect saved project brand styles for generated email drafts. Returns paginated project brand style summaries, ids, default status, style metadata, and app URLs. Do not use to create, update, delete, or expose raw style provenance.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    Maximum number of brand styles to return for this page.
  • offset · integer · optionnel
    Zero-based brand style offset for pagination. Use nextOffset from the previous response to fetch the next page.
  • projectId · string · optionnel
    Project id to list brand styles from. Required when access is ambiguous.

  Exemple d'appel

  {"name": "list_brand_styles", "arguments": {"limit": 1, "offset": 1, "projectId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• list_projects≈ 3195 tokens

  Read-only. Use when the target project is unknown or the user names a project instead of providing an id. Returns accessible Dreamlit projects in the approved workspace with project and workflow-list URLs. Do not use to inspect workflow structure or author changes.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Maximum number of projects to return.
  • search · string · optionnel
    Optional project name search string.

  Exemple d'appel

  {"name": "list_projects", "arguments": {"limit": 1, "search": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• list_workflows≈ 3458 tokens

  Read-only. Use to find workflows in a project by name, description, or trigger type before inspection or editing. Trigger filters include database, auth email, repeating, broadcast, and no-trigger workflows. Returns paginated workflow summaries, published/sandbox state, trigger type, folder (the folder name in the list the workflow shows in, or null), workflow URLs, totalCount, hasMore, and nextOffset. Do not use as the final source of truth before editing; call get_workflow_and_preview_url for full structure.

  Paramètres, retour & exemple (5)

  Paramètres

  • limit · integer · optionnel
    Maximum number of workflows to return for this page.
  • offset · integer · optionnel
    Zero-based workflow offset for pagination. Use nextOffset from the previous response to fetch the next page.
  • search · string · optionnel
    Optional workflow name or description search string.
  • projectId · string · optionnel
    Project id to list workflows from. Required when access is ambiguous.
  • triggerFilters · array · optionnel
    Optional trigger type filters. Use broadcast only for one-time audience emails.

  Exemple d'appel

  {"name": "list_workflows", "arguments": {"limit": 1, "offset": 1, "search": "texte", "projectId": "texte", "triggerFilters": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• move_workflow_to_folder≈ 3388 tokens

  Use when the user asks to put a workflow or broadcast in a folder, move it to another folder, or take it out of a folder. Folders are per list: the Published and Drafts lists on the Workflows page and the Sent and Drafts lists on the Broadcasts page each have their own folders, and this moves the workflow within the list it shows in now. Folders are flat; a "/" is just part of the name. A draft's folder does not carry over when it is published. Side effect: may create the folder; never deletes folders and does not change the draft, published version, or live triggers. Returns the folder, the list, and app URLs. Do not use to rename or delete folders.

  Paramètres, retour & exemple (2)

  Paramètres

  • folder · ? · requis
    Folder name, up to 64 characters. Matching ignores case and leading or trailing spaces; Dreamlit creates the folder if it doesn't exist yet. Pass null to take the workflow out of its folder.
  • workflowId · string · requis
    Workflow id to move.

  Exemple d'appel

  {"name": "move_workflow_to_folder", "arguments": {"folder": "texte", "workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• prepare_publish≈ 3236 tokens

  Read-only validation step before publishing. Use after the user asks to publish and after inspecting the workflow if needed. Returns validation status, publish mode, preview URL, and a confirmation payload with version/timestamp safety checks for confirm_publish. Does not publish or schedule anything by itself.

  Paramètres, retour & exemple (1)

  Paramètres

  • workflowId · string · requis
    Workflow id to validate and prepare for explicit publish approval.

  Exemple d'appel

  {"name": "prepare_publish", "arguments": {"workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• rename_workflow≈ 3261 tokens

  Use when the user asks to rename an existing Dreamlit workflow. Side effect: changes only the workflow name; the draft, published version, and live triggers are unchanged. Returns the updated name and app URLs. Do not use to edit workflow content or to name a new workflow; pass name to create_or_update_workflow instead.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
    New workflow name. Leading and trailing spaces are removed; it can't be blank.
  • workflowId · string · requis
    Workflow id to rename.

  Exemple d'appel

  {"name": "rename_workflow", "arguments": {"name": "texte", "workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• send_workflow_test≈ 3610 tokens

  Side effect when confirmSend is true: sends one current draft email or Slack message for review, but does not publish, schedule, or edit the workflow. Use after authoring or inspection when the user wants to verify an important message before publishing. Returns sent-test details, app URLs, a confirmation request, or a clarification request with user-facing message choices. Do not expose test target ids as copy; ask users to choose by message label and confirm before sending.

  Paramètres, retour & exemple (6)

  Paramètres

  • rowData · object · optionnel
    Optional sample data for rendering draft message variables during the test. If omitted, Dreamlit uses the same default preview data as the web builder when available.
  • workflowId · string · requis
    Workflow id whose editable draft message should be tested.
  • confirmSend · boolean · optionnel
    Set to true only after the user explicitly confirms sending this selected test message. If omitted or false, Dreamlit returns confirmation_required and does not send.
  • messageType · string · optionnel · email | slack
    Optional message type filter when selecting a draft message to test.
  • testTargetId · string · optionnel
    Structured test target id from testableMessages. Do not show this id to users; ask them to choose by message label.
  • testRecipientEmail · string · optionnel
    Optional recipient for email tests. If omitted, Dreamlit sends to the authenticated user's email address.

  Exemple d'appel

  {"name": "send_workflow_test", "arguments": {"workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• unpublish_workflow≈ 3235 tokens

  Use after explicit user intent to unpublish a Dreamlit workflow. Side effect: disables live triggers or schedules for that workflow and stops future automated sends. Returns updated workflow status and app URLs. Do not use for deleting drafts, canceling one broadcast run, or editing workflow content.

  Paramètres, retour & exemple (1)

  Paramètres

  • workflowId · string · requis
    Workflow id to unpublish and disable live triggers or schedules.

  Exemple d'appel

  {"name": "unpublish_workflow", "arguments": {"workflowId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.dreamlit.ai/mcp